Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 180 of 521.
- CVE-2024-57727 SimpleHelp Path Traversal
- CVE-2024-57726 SimpleHelp Missing Authorization
- CVE-2024-57725 An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication,
- CVE-2024-57724 Denial of service in sammycage:lunasvg
- CVE-2024-57723 Memory corruption in sammycage:lunasvg
- CVE-2024-57722 Denial of service in sammycage:lunasvg
- CVE-2024-57721 Memory corruption in sammycage:lunasvg
- CVE-2024-57720 Memory corruption in sammycage:lunasvg
- CVE-2024-5772 Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection
- CVE-2024-57719 Null dereference in sammycage:lunasvg
- CVE-2024-57716 AutoQueryable leaks sensitive information
- CVE-2024-5771 LabVantage LIMS POST Request sql injection
- CVE-2024-57708 An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components.
- CVE-2024-57707 Code injection in dataease:dataease
- CVE-2024-57704 Memory corruption in tenda:ac8 firmware
- CVE-2024-57703 Memory corruption in tenda:ac8 firmware
- CVE-2024-5770 WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update
- CVE-2024-57699 Netplex Json-smart Uncontrolled Recursion vulnerability
- CVE-2024-57698 Missing authorization in modernwms:modernwms
- CVE-2024-57695 Command injection in opswat:outpost security suite
- CVE-2024-5769 MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update
- CVE-2024-57687 Command injection in phpgurukul:land record system
- CVE-2024-57686 Cross-site scripting in phpgurukul:land record system
- CVE-2024-57685 Command injection in sparkshop:sparkshop
- CVE-2024-57684 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57683 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57682 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57681 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57680 Missing authorization in dlink:dir-816 firmware
- CVE-2024-5768 Missing authorization in MIMO Woocommerce Order Tracking
- CVE-2024-57679 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57678 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57677 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57676 Missing authorization in dlink:dir-816 firmware
- CVE-2024-57673 Denial of service in projectfloodlight:floodlight
- CVE-2024-57672 Denial of service in projectfloodlight:floodlight
- CVE-2024-5767 Sitetweet <= 0.2 - Stored XSS via CSRF
- CVE-2024-57669 Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the Bac
- CVE-2024-57668 File upload in fabian:shopping portal
- CVE-2024-57665 SQL injection in heyewei:jfinalcms
- CVE-2024-57664 Denial of service in openlinksw:virtuoso
- CVE-2024-57663 Denial of service in openlinksw:virtuoso
- CVE-2024-57662 Denial of service in openlinksw:virtuoso
- CVE-2024-57661 Denial of service in openlinksw:virtuoso
- CVE-2024-57660 Denial of service in openlinksw:virtuoso
- CVE-2024-5766 Likeshop Merchandise admin cross site scripting
- CVE-2024-57659 Denial of service in openlinksw:virtuoso
- CVE-2024-57658 Denial of service in openlinksw:virtuoso
- CVE-2024-57657 Denial of service in openlinksw:virtuoso
- CVE-2024-57656 Denial of service in openlinksw:virtuoso
- CVE-2024-57655 Denial of service in openlinksw:virtuoso
- CVE-2024-57654 Denial of service in openlinksw:virtuoso
- CVE-2024-57653 Denial of service in openlinksw:virtuoso
- CVE-2024-57652 Denial of service in openlinksw:virtuoso
- CVE-2024-57651 Denial of service in openlinksw:virtuoso
- CVE-2024-57650 Denial of service in openlinksw:virtuoso
- CVE-2024-5765 WpStickyBar <= 2.1.0 - Unauthenticated SQLi
- CVE-2024-57649 Denial of service in openlinksw:virtuoso
- CVE-2024-57648 Denial of service in openlinksw:virtuoso
- CVE-2024-57647 Denial of service in openlinksw:virtuoso
- CVE-2024-57646 Denial of service in openlinksw:virtuoso
- CVE-2024-57645 Denial of service in openlinksw:virtuoso
- CVE-2024-57644 Denial of service in openlinksw:virtuoso
- CVE-2024-57643 Denial of service in openlinksw:virtuoso
- CVE-2024-57642 Denial of service in openlinksw:virtuoso
- CVE-2024-57641 Denial of service in openlinksw:virtuoso
- CVE-2024-57640 Denial of service in openlinksw:virtuoso
- CVE-2024-5764 Nexus Repository 3 - Static hard-coded encryption passphrase used by default
- CVE-2024-57639 Denial of service in openlinksw:virtuoso
- CVE-2024-57638 Denial of service in openlinksw:virtuoso
- CVE-2024-57637 Denial of service in openlinksw:virtuoso
- CVE-2024-57636 Denial of service in openlinksw:virtuoso
- CVE-2024-57635 Denial of service in openlinksw:virtuoso
- CVE-2024-57634 Denial of service in monetdb:monetdb
- CVE-2024-57633 Denial of service in monetdb:monetdb
- CVE-2024-57632 Denial of service in monetdb:monetdb
- CVE-2024-57631 Denial of service in monetdb:monetdb
- CVE-2024-57630 Denial of service in monetdb:monetdb
- CVE-2024-5763 Cross-site scripting in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
- CVE-2024-57629 Denial of service in monetdb:monetdb
- CVE-2024-57628 Denial of service in monetdb:monetdb
- CVE-2024-57627 Denial of service in monetdb:monetdb
- CVE-2024-57626 Denial of service in monetdb:monetdb
- CVE-2024-57625 Denial of service in monetdb:monetdb
- CVE-2024-57624 Denial of service in monetdb:monetdb
- CVE-2024-57623 Denial of service in monetdb:monetdb
- CVE-2024-57622 Denial of service in monetdb:monetdb
- CVE-2024-57621 Denial of service in monetdb:monetdb
- CVE-2024-57620 Denial of service in monetdb:monetdb
- CVE-2024-5762 Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability
- CVE-2024-57619 Denial of service in monetdb:monetdb
- CVE-2024-57618 Denial of service in monetdb:monetdb
- CVE-2024-57617 Denial of service in monetdb:monetdb
- CVE-2024-57616 Denial of service in monetdb:monetdb
- CVE-2024-57615 Denial of service in monetdb:monetdb
- CVE-2024-57611 Cross-site request forgery in 07fly:07flycms
- CVE-2024-57610 Security feature bypass in sylius:sylius
- CVE-2024-57609 An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via
- CVE-2024-57608 An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component.
- CVE-2024-57606 SQL injection in JeecgBoot